note gssEapAcquireCred should validate RADIUS config